ID. Date of interview 
date 42/92/20 


ID. Time interview started 
start 08:48:38 


ID.end Completion date of interview 
Date 42/02/20 


ID.end Time interview ended 
08:55:33 


ID. Duration of interview 
time 6.92 


new Case 


ICO consultation on the draft right of access 
guidance 


Q1 


Does the draft guidance cover the relevant issues about the right of access? 
© Yes 
©) No 

©) Unsure / don't know 

If no or unsure/don’t know, what other issues would you like to be covered in it? 


Q2 


Does the draft guidance contain the right level of detail? 
O) Yes 
No 
©) Unsure / don't know 


If no or unsure/don't know, in what areas should there be more detail within the draft 
guidance? 


Need more information re stopping the clock as not having the ability to do this greatly impacts on the 


organisations compliance figures. As handling 100+ requests a month, which often need consultation with 
the applicant. 


Q3 


Does the draft guidance contain enough examples? 
© Yes 
—) No 

©) Unsure / don't know 

If no or unsure/don’t know, please provide any examples that think should be included in 
the draft guidance. 


Q4 


We have found that data protection professionals often struggle with applying and 
defining ‘manifestly 

unfounded or excessive’ subject access requests. We would like to include a wide 

range of examples 

from a variety of sectors to help you. Please provide some examples of manifestly 
unfounded and excessive 

requests below (if applicable). 


Q5 


Q6 


Q7 


On a scale of 1-5 how useful is the draft guidance? 


3 ee: 
1-Notatall 2-Slightly Moderately 
useful useful useful 
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Why have you given this score? 
some areas need further examples 


4 — Very 
useful 


© 


5 — Extremely 


useful 


oo, 


| 
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To what extent do you agree that the draft guidance is clear and easy to understand? 


Strongly Neither agree 
disagree Disagree nor disagree 
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Agree 


© 


Strongly 


agree 


ff ` 
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Please provide any further comments or suggestions you may have about the draft 
guidance. 


Following the GDPR legislation change in 2017 the Trust has seen a significant 
increase in SAR along with telephone queries. Whilst we have manged this change 
without any further investment in staffing/resources the further proposed change to 
timescales will hinder the efficiency in which the requests are currently dealt with. 
Systems will need to be reset along with reorganisation of staffing etc — all of which 
is nye impossible with the current constraints on funding within the acute Trust 
setting. This Trust currently manages to comply with the 30 day timescales most of 
the time but the impact of not being able to apply stopr cock or have additional 
guidance around this will most certainly see breaches to timescales and complaints 
increase. This in itself will expose NHS organisations to the risk of fines which of 
course, will hinder the reputation/performance of a cash strapped organisation. 


Are you answering as: 


C) An individual acting in a private capacity (eg someone providing their views as a member of the public) 
(`) An individual acting in a professional capacity 

© On behalf of an organisation 

€ ) Other 

Please specify the name of your organisation: 

NHS Trust 


What sector are you from: 
NHS 


Q10 How did you find out about this survey? 
©) ICO Twitter account 
(|) ICO Facebook account 
©) ICO LinkedIn account 
© ICO website 
©) ICO newsletter 
C) ICO staff member 
C) Colleague 
©) Personal/work Twitter account 
(`) Personal/work Facebook account 
() Personal/work LinkedIn account 
O Other 
If other please specify: 


